Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例（干净样例，0 条发现）
Security audit
跨境电商平台佣金与广告费核对（免费版）
Security checks for vulnerabilities and agentic risk
Overview
This skill is a local spreadsheet-style checker for settlement and advertising fee data, and its code matches that stated purpose without hidden network, credential, persistence, or destructive behavior.
Install only if you are comfortable running a local Node-based checker on settlement and advertising fee bill text. Keep in mind that the tool is mainly Chinese-language, does not validate contract terms or platform back-office data, and only checks the arithmetic and table consistency it explicitly lists.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (8)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例（干净样例，0 条发现）
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例（干净样例，0 条发现）
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例（干净样例，0 条发现）
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
This JavaScript file contains its user-facing description, sample data, advice text, and result messages entirely in Chinese, and there is no indication that the user can opt into another language. Under the stated policy, forcing a specific language or locale without user choice is a natural-language policy violation.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 87% confidence
- Finding
The user-facing capability description, usage text, errors, and results messaging are entirely in Chinese, and the file does not indicate that users may choose another language. Under the policy rule, forcing a specific language without opt-in is a natural-language policy concern unless the locale restriction is explicitly justified.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 82% confidence
- Finding
The only natural-language content in this manifest JSON is a Chinese table template, which indicates the skill is oriented to a specific language/locale. There is no accompanying text offering language choice or documenting that the skill is intentionally region-specific, so this can violate the policy against forcing a language without user opt-in.
- Content
Intent-Code Divergence
Low
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
L075 的注释写明“不是 JSON 就当作纯文本材料（例如直接粘贴的合同全文）”，但该技能整体用途、帮助文本和输出均明确限定为平台结算单与广告费账单核对。代码本身确实会把任意非 JSON 文本送入核对引擎，因此这条注释主动引入了与技能意图不一致的材料类型示例。
- Content